Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
File: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json)
Hash identifier: wiFTHJmgp5Gkv9PJE2AP9xWVZ7EMciOwXy82eEjTE2w=
Subject key identifier: 85:F4:36:EB:99:FD:F5:4A:76:33:88:13:64:30:FD:77:CB:5C:DF:97
Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
Certificate issuer: /CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Certificate serial: 29E391AB65AF0CEBBA8F1A27448E619438CBD964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
Manifest number: 74
Signing time: Mon 20 Oct 2025 05:31:27 +0000
Manifest this update: Mon 20 Oct 2025 05:26:27 +0000
Manifest next update: Tue 21 Oct 2025 06:32:27 +0000
Files and hashes: 1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: WWByhheT+TXqJBMqGPAWeeiB2Z409QVOzHy2tyU8X98=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e3:91:ab:65:af:0c:eb:ba:8f:1a:27:44:8e:61:94:38:cb:d9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Validity
Not Before: Oct 20 05:26:27 2025 GMT
Not After : Oct 21 06:32:27 2025 GMT
Subject: CN=85F436EB99FDF54A763388136430FD77CB5CDF97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:e5:41:2d:4e:fb:bf:f6:8b:8d:11:c5:6b:
c4:95:2a:9f:77:3f:cf:94:e4:35:cf:84:a8:fe:b1:
fc:2f:76:f6:1e:0e:64:7f:4b:d3:a8:5a:a8:2c:fb:
14:03:cd:c3:5f:6f:2a:81:26:30:75:aa:86:b1:db:
5b:5c:72:a7:7b:1a:b9:20:d5:ed:38:fa:78:f0:e2:
29:4c:0f:a2:0f:92:08:79:c9:6e:1f:ee:3f:a2:5a:
60:dd:8c:9d:8f:72:68:26:79:ab:c4:5f:fa:3e:2e:
a7:ce:28:7f:58:89:5c:f9:c9:49:79:ad:88:0c:ff:
24:b2:6f:8f:97:2f:31:eb:92:ca:ce:6a:6e:1b:92:
03:90:13:ed:aa:ef:28:f6:88:d8:ff:ba:08:85:72:
cd:df:eb:7a:4b:b3:f0:46:50:e1:97:66:a7:6e:0f:
d5:e2:92:43:47:27:5d:39:b8:ad:7a:5a:86:ea:04:
dc:a6:7d:94:89:5c:28:f7:5a:36:81:83:bd:d5:47:
ee:5e:ac:bc:c2:1e:aa:72:6e:a2:9e:d3:9f:80:d0:
93:fd:7a:df:df:62:2e:16:53:63:ca:5d:11:7e:5c:
21:3b:f3:06:25:7a:5e:ca:b1:a1:0c:7d:94:73:8c:
e0:04:f6:6b:3d:bd:17:08:cd:18:33:0a:0d:10:ec:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F4:36:EB:99:FD:F5:4A:76:33:88:13:64:30:FD:77:CB:5C:DF:97
X509v3 Authority Key Identifier:
keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:42:47:a2:33:ee:97:72:b9:95:a8:42:c5:b5:fe:6a:9b:0d:
4a:4b:cf:e2:8c:b9:0d:90:71:42:38:fb:cf:1b:32:0a:29:9d:
5a:d7:e8:14:01:98:2c:9c:7e:92:07:0f:4a:86:31:7b:8c:83:
60:d6:1a:75:a8:0e:7c:c7:a2:7c:0c:31:3c:80:87:37:7a:79:
5d:22:21:ce:6e:17:9d:7b:89:68:fe:45:cb:ac:cc:5f:db:a4:
a8:3c:5f:6f:9d:8d:32:57:e5:8e:e7:e8:9f:92:71:ea:4f:09:
d5:08:ec:2b:64:6c:d5:75:1e:d7:4b:bb:31:f8:91:d4:82:71:
b5:7f:90:13:de:3e:3b:a3:c8:60:c3:a8:c3:26:2a:1e:99:f7:
86:c4:7f:c2:f7:b3:97:d8:60:25:58:9f:08:a9:5d:d2:35:12:
62:ca:27:8c:b9:c9:29:d7:dd:48:95:e4:ca:7e:8d:55:64:42:
42:b1:27:65:4d:c4:20:10:de:df:e9:c9:ed:64:cf:45:4a:8a:
a5:ab:f6:a5:61:dd:18:68:57:ff:1b:cf:3a:bd:80:ed:b5:20:
1f:19:c1:7e:92:af:60:2d:ef:4b:1f:a0:2c:ab:07:32:3f:22:
23:5b:d9:07:c7:9b:de:76:38:91:87:2b:d7:01:52:24:4b:ff:
a3:99:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:39 2025 by rpki-client